All services
ISO 27001
The baseline certification most enterprise, government, and procurement panels require. Gap analysis, risk treatment, SoA, and audit-ready evidence — all automated in Microsoft 365.
Essential Eight
Australia's baseline cyber security framework — all eight controls assessed, implemented, and evidenced to ML2. Fixed-price, milestone-gated, Microsoft 365-native.
IS18 (QGEA)
IS18:2018 delivered as what it actually is — an ISO 27001-aligned ISMS plus Essential Eight, plus QGISCF classification, CSU incident reporting, and the accountable officer's 30 September annual return. Everything stays inside your own tenant.
RFFR (Right Fit For Risk)
Right Fit For Risk for Employment Services providers — the full ISM Statement of Applicability (989 controls + 7 program-deed obligations) delivered on an ISO 27001 ISMS with Essential Eight uplift. Nearly a third of the SoA assessed automatically from your Microsoft 365 tenant.
ISO 42001
Model inventory, AI risk assessments, human oversight, and monitoring — built inside your existing Microsoft 365 stack. Aligned to the Australian AI Safety Standard and EU AI Act.
SOC 2 Readiness
Trust Services Criteria mapped to your systems. Type I and Type II readiness with reusable, automated evidence that unlocks US and global enterprise contracts.
ISO 27701
Extends ISO 27001 into privacy. DPIAs, ROPAs, data rights workflows, and third-party privacy risk — streamlined inside Microsoft 365 without a third-party platform. Aligned to the Australian Privacy Act.
DISP / ISM / IRAP
Defence Industry Security Programme, Information Security Manual, and IRAP readiness. Map your existing Microsoft E5 stack to ASD and ISM requirements and get government panel-ready.
NIST CSF
Align to NIST CSF (Identify → Protect → Detect → Respond → Recover) — mapped to ISO 27001 and Essential Eight so work overlaps rather than duplicates.
